unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

bind-internal: allow admin workstation to query the resolver #259

Merged
benvin merged 1 commits from benvin/bind-resolver-acl-admin into main 2026-07-16 23:13:31 +10:00
Conversation 0 Commits 1 Files Changed 1
+3
unkinben commented 2026-07-16 23:10:40 +10:00
Owner
Copy Link
Copy Source

Why

Follow-up to #258 (which added workstation+router to the authoritative ACL). The resolver (bind-resolvers, 198.18.200.7) has its own acl-main.unkin.net gating its openforwarder view; the workstation is not in it, so recursive queries return REFUSED. This lets the workstation use the resolver as its normal nameserver.

Changes

  • Add 10.10.12.200/32 (workstation, wireguard) to resolver acl-main.unkin.net
  • Add 198.18.21.160/32 (router) explicitly for documentation; already covered by existing 198.18.21.160/27 and 198.18.21.0/24 (no functional change for the router)
## Why Follow-up to #258 (which added workstation+router to the *authoritative* ACL). The **resolver** (bind-resolvers, 198.18.200.7) has its own `acl-main.unkin.net` gating its `openforwarder` view; the workstation is not in it, so recursive queries return REFUSED. This lets the workstation use the resolver as its normal nameserver. ## Changes - Add `10.10.12.200/32` (workstation, wireguard) to resolver `acl-main.unkin.net` - Add `198.18.21.160/32` (router) explicitly for documentation; already covered by existing `198.18.21.160/27` and `198.18.21.0/24` (no functional change for the router)
unkinben added 1 commit 2026-07-16 23:10:41 +10:00
bind-internal: allow admin workstation to query the resolver
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
757e746a66 
Adds the operator workstation (10.10.12.200, wireguard) to the resolver
acl-main.unkin.net so it can use bind-resolvers (198.18.200.7) for recursive
lookups. Also lists the router (198.18.21.160) explicitly for documentation;
it is already covered by the existing 198.18.21.160/27 and 198.18.21.0/24.
benvin merged commit 197991a6ca into main 2026-07-16 23:13:31 +10:00
benvin deleted branch benvin/bind-resolver-acl-admin 2026-07-16 23:13:31 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#259
Delete Branch "benvin/bind-resolver-acl-admin"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?